Red Hat build of Debezium 3/jackson-core
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() | com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core | MavenRed Hat | High | Fix reported | |
| jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS) | com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core | MavenRed Hat | High | Fix reported | |
| jackson-core can throw a StackoverflowError when processing deeply nested data | com.fasterxml.jackson.core:jackson-coreRed Hat AMQ Broker 7/jackson-core | MavenRed Hat | High | Fix reported | |
| Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation | com.fasterxml.jackson.core:jackson-coreCryostat 4/jackson-core | MavenRed Hat | Medium | Fix reported |